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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 



Introduction 



This technical specification gives an overview of the security architecture, and defines the security features and security 
mechanisms for the presence services. 

Presence services enable the spreading of presence information of a user to users or services. A presence entity or 
presentity comprises the user, users devices, services and services components. It is the intention that this platform will 
enable new services like e.g. enhancement to chat, multimedia messaging, cinema ticket information, the score of a 
football game and so on. 

A user has the possibility to control if her or his information shall be available to other users or services. This control is 
possible to achieve with high granularity e.g. explicitly define which user or users and services that shall have access to 
presence information. 

A presentity is a uniquely identifiable entity with the capability to provide with presence information and it has only one 
principal associated with it. Hence a principal is distinct from all other principals and can be e.g. a human, organisation, 
program or even a collection thereof. One example of such a relation is when the presentity is a terminal and the 
principal of the terminal is the subscriber. However, the presence service is based on Public Identities, and consequently 
it is possible to have several terminals related to the same presentity. A watcher is also an uniquely identifiable entity 
but with the aim to fetch or request information about a presentity. There are access rules that set the rules for the 
presence service how presence information gets available to watchers. 

Presence information consists of a number of elements or presence tuples as defined in TS 23. 141 [3] 
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Scope 



The present document is the Stage 2 specification for the security requirements, security architecture, security features 
and security mechanisms for the Presence Service, which includes the elements necessary to realise the requirements in 
TS 22.141 [2] and TS 23.141 [3]. As far as SIP-based procedures are concerned, this specification refers to 
TS 33.203 [4]. The main content of this specification is the security for the Ut reference point, which is HTTP-based, as 
applied in presence services. 

The present document includes information applicable to network operators, service providers and manufacturers. 



2 References 

The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[I] 3GPP TR 21.905: "Vocabulary for 3GPP Specifications". 
[2] 3GPP TS 22.141: "Presence service; Stage 1". 

[3] 3GPP TS 23.141: "Presence service; Architecture and functional description". 

[4] 3GPP TS 33.203: "3G Security; Access security for IP-based services". 

[5] 3GPP TS 23.228: "IP Multimedia Subsystem (IMS); Stage 2". 

[6] IETF RFC 2246 (1999): "The TLS Protocol Version 1". 

[7] 3GPP TS 23.002: "Network architecture". 

[8] IETF RFC 3268 (2002): "Advanced Encryption Standard (AES) Ciphersuites for Transport Layer 

Security (TLS)". 

[9] IETF RFC 3546 (2003): "Transport Layer Security (TLS) Extensions". 

[10] 3GPP TS 33.210: "3G Security; Network Domain Security; IP network layer security". 

[II] 3GPP TS 33.220: "Generic Authentication Architecture (GAA); Generic Bootstrapping 
Architecture". 

[12] OMAWAP-211-WAPCert, 22.5.2001: 

http://www.openmobilealliance.or.g/tech/affiliates/wap/wap-2 ll-wapcert-20010522-a.pdf . 

[13] Void. 

[14] IETF draft-ietf-ds-rfc2246-bis-05 (2003): "The TLS Protocol Version 1.1". 

[15] 3GPP TR 33.919: "Generic Authentication Architecture (GAA); System description". 

[16] 3GPP TS 24.109: "Bootstrapping interface (Ub) and Network appUcation function interface (Ua); 

Protocol details". 

[17] IETF RFC 2818 (2000): "HTTP over TLS". 
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[18] IETF RFC 3310 (2002); "Hypertext Transfer Protocol (HTTP) Digest Authentication Using 

Authentication and Key Agreement (AKA)". 

[19] 3GPP TS 33.222: " Generic Authentication Architecture (GAA); Access to network application 

functions using secure hypertext transfer protocol (HTTPS)". 

[20] 3GPP TR 33.978: "3rd Generation Partnership Project; Technical Specification Group Services 

and System Aspects; 3G Security; Security Aspects Of Early IMS". 



3 Definitions and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply. 

Confidentiality: The property that information is not made available or disclosed to unauthorised individuals, entities 
or processes. 

Data integrity: The property that data has not been altered in an unauthorised manner. 

Data origin authentication: The corroboration that the source of data received is as claimed. 

Entity authentication: The provision of assurance of the claimed identity of an entity. 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply, TR 21.905 [1] contains additional 
applicable abbreviations: 

AKA Authentication and key agreement 

AP Authentication Proxy 

CSCF Call Session Control Function 

HSS Home Subscriber Server 

IM IP Multimedia 

IMPI IM Private Identity 

IMPU IM Public Identity 

IMS IP Multimedia Core Network Subsystem 

ISIM IM Services Identity Module 

MAC Message Authentication Code 

ME Mobile Equipment 

SA Security Association 

SEG Security Gateway 

SDP Session Description Protocol 

SIP Session Initiation Protocol 

UA User Agent 



4 Secu rity arch itectu re 

4.1 Overview of the security architecture 

An IMS operator using the CSCFs as Watcher Presence proxies and Presentity Presence proxies may offer the Presence 
services on top of the IMS network, see TS 22.141 [2]. The access security for IMS is specified in TS 33.203 [4] 
ensuring that SIP signalling is integrity protected and that IMS subscribers are authenticated through the use of IMS 
AKA. The security termination point from the UE towards the network is in the P-CSCF utilising IPsec ESP. 
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A watcher can be sending a SIP SUBSCRIBE over IMS towards the network to subscribe or to fetch presence 
information, i.e. the Presence Service supports SIP-based communications for publishing presence information. The 
presence information is provided by the Presence Server to the Watcher Application using SIP NOTIFY along the 
dialogue setup by SUBSCRIBE. This traffic is protected in a hop-by-hop fashion using a combination of SEGs as 
specified in TS 33.210 [10] with the access security provided in TS 33.203 [4]. 

The Presence Server is responsible for managing presence information on behalf of the presence entity and it resides in 
the presentity's home network. Furthermore the Presence Server provides with a subscription authorization policy that is 
used to determine which watchers are allowed to subscribe to certain presence information. Also the Presence Server 
shall before subscription is accepted try to verify the identity of the watcher before the watcher subscribes to presence 
information. Optionally, depending on the implementation, the Presence Server may authenticate an anonymous 
watcher depending on the Subscription Authorization Policy. 

A Presence List Server is responsible of storing grouped lists of watched presentities and enable a Watcher Application 
to subscribe to the presence of multiple presentities using a single SIP SUBSCRIBE transaction. The Presence List 
Server also stores and enables management of filters in the presence list, see figure 1 . 
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Figure 1 : The Location of the Presence Server and the Presence List Server from an IIUIS point of 

view 



4.2 The Ut reference point 



A Presence User Agent shall be able to manage the data on the Presence Server and the Presence List Server over the Ut 
reference point, see TS 23.002 [7], which is based on HTTP. This reference point is not covered in TS 33.203 [4] and it 
is mainly this reference point for Presence use, which is covered in this specification. 

NOTE: The term Presence Server refers to both the Presence Server and the Presence List Server as depicted in 
figure 1 above. For definitions of the Presence Server and the Presence List Server see TS 23.141 [3]. 

An overview of the security architecture for Presence Ut reference point is depicted in figure 2: 
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Figure 2: An overview of the Security architecture for the Ut reference point including the support of 

an Authentication Proxy 



5.1 



Security features 

Secure Access to the Presence Server over the Ut 
reference point 



5.1 .1 Authentication of tine subscriber and tine presence server 

A subscriber shall be authenticated before accessing user data in a server. The subscriber shall only be able to 
manipulate data that is associated with that particular subscriber. A subscriber shall authenticate the presence server. 

Authentication between the subscriber and the presence server shall be performed as specified in clause 6.1. 

5.1 .2 Confidentiality protection 

It shall be possible to apply confidentiality protection over the Ut reference point. 

5.1 .3 Integrity protection 

The Ut reference point shall be integrity protected. 

5.1.4 Authentication Proxy 

The Authentication Proxy may reside between the UE and the Presence Server as depicted in figure 2. Its use is 
specified in TS 33.222 [19]. 

The following requirements apply for the use of an Authentication Proxy in addition to those in TS 33.222 [19]: 

Authentication Proxy may authenticate the UE using the means of Generic Bootstrapping Architecture, or it may 
use other means of authentication; 

if the AP uses the GBA for authentication the UE, then the procedures shall conform to TS 33.222 [19]. 

Confidentiality and integrity protection may be provided for the interface between the AP and the AS, using the Zb 
interface of NDS/IP as specified in TS 33.222 [19]. 
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6 Security Mechanisms for the Ut reference point 

The UE and the AP/Presence Server shall support the TLS version and profile as specified in clause 5.3 of 
TS 33.222 [19]. 

6.1 Authentication and key agreement 

6.1 .1 Authentication of the subscriber 

The authentication of the UE may take place in either the Authentication Proxy, see TS 33.222 [19], or the Presence 
server. 

Subscriber authentication can be also performed by the operator using proprietary or non-3G standardized methods. A 
UE may contact the Presence Server/ AP for further instructions on authentication procedures, see initiation of 
bootstrapping in clause 4.5.1 ofTS 33.220 [11]. 

In case 3GPP authentication mechanisms are used, the authentication of the subscriber shall be based on the Generic 
Authentication Architecture as defined in TR 33.919 [15]. Generic Authentication Architecture enables the use of 
different authentication methods to be used for the authentication of the subscriber by using: 

subscriber certificates; or 

shared secrets. 

For both cases, the authentication of the subscriber shall conform to the use of the Generic Authentication Architecture, 
TR 33.919 [15], for access to network application functions using HTTPS, as specified in TS 33.222 [19]. 

6.1 .2 Authentication of the AP/Presence Server 

Authentication of the AP/Presence Server shall be performed according to clause 5.3.1.3 of TS 33.222 [19]. 

6.1 .3 Management of public user identities 

The presence server, acting as a NAP in the sense of TS 33.220 [11], may obtain identities related to the subscriber over 
the Zn reference point, as part of the GBA user security setting for presence, according to the policies of the BSE, see 
clause 4.5.3 of TS 33.220 [11]. These identities may include the IMPI and several IMPUs. The UE shall send its 
preferred public user identity in each HTTP request. The Presence server (or AP) shall then verify that the preferred 
identity inserted in the HTTP request by the UE is one of the IMPUs, associated with the HTTP request, according to 
clause 6.5.2.4 of TS 33.222 [19]. 

If the presence server sits behind an AP and the verification of the preferred identity, which was inserted by the UE in 
the HTTP request, was successful, then the AP shall verify the value of the preferred identity of the user in the HTTP 
request before forwarding it to the presence server. How the asserted user identity is carried in each HTTP request is 
specified in the relevant stage 3 specification. 

If there is no preferred identity inserted in the HTTP request, the AP shall insert a default IMPU from the user profile in 
the HTTP request, before forwarding it to the Presence server. If the validation of the UE inserted preferred identity 
fails in the AP the HTTP request shall be dropped. 

6.1 .4 Authentication failures 

The handling of authentication failures shall be according to clause 5.3.1.4 of TS 33.222 [19]. 



6.2 Confidentiality protection 



If confidentiality protection is provided over the Ut interface, then it shall be provided using TLS and with effective 
encryption key size of at least 128 bits. The terminal shall in the negotiation phase include protection alternatives that 
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include at least one alternative with encryption algorithm support. The terminal and the server shall be able to resume a 
previous session and to perform an abbreviated handshake. 



6.3 Integrity protection 



Integrity protection over the Ut reference point shall be provided using TLS and with effective key size of at least 
128 bits. The terminal and the server shall be able to resume a previous session and to perform an abbreviated 
handshake. 



7 Security parameters agreement 

7.1 Set-up of Security parameters 

Security parameters shall be set-up according to clause 5.3.15 of TS 33.222 [19]. 

7.2 Error cases 

Error cases shall be handled as specified in clause 5.3.1.6 of TS 33.222 [19]. In addition, the AP/Presence Server shall 
consider the following cases as a fatal error: 

if none of the received ciphersuites include encryption and the policy of the operator stipulates that encryption is 
required; 

if the policy of the operator stipulates that encryption is required and the common set of supported ciphersuites 
only include key material less than the number of bits required by the operator for confidentiality protection. 
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Annex A: 
Void 
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Annex B (informative): Security aspects of early Ut interface 
security 

An interim security solution for early Ut interface implementations, that are not fully compliant with the present 
document, is given in TR 33.978 [20]. 
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